Hi. On Sat, Mar 21, 2020 at 01:44:21AM +0100, rudu wrote: > I searched the web with as many keywords as I could think of, to no avail ... > for me.
You should've searched for aa-logprof. > What I figure out is the problem is that somehow, apparmor denies to > network-manager the ability to provide a valid resolv.conf file. > So ipsec can't add a DNS server to my VPN connection. For that particular file it's: echo "/run/NetworkManager/resolv.conf rwk" \ >> /etc/apparmor.d/local/usr.lib.ipsec.charon aa-complain /usr/lib/ipsec/charon aa-enforce /usr/lib/ipsec/charon Reco